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1.  PROGRAM  OBJECTIVES 

The  objective  of  this  research,  as  described  in  the  proposal  and  the  previous  progress  report,  is 
the  investigation  of  several  issues  related  to  coordination  in  organizations.  In  particular,  an 
organization  is  coordinated  through  direct  and  indirect  means.  The  direct  means  includes  the  set 
of  decision  rules  that  the  organization  members  use  and  the  commands  that  they  issue  to  each 
other.  Indirect  means  include  the  dissemination  of  information  within  the  organization;  for 
example,  organization  members  may  share  information  or  they  may  inform  each  other  as  to  the 
actions  they  plan  to  take  or  decisions  they  have  made.  Coordination  becomes  a  complex  issue 
in  variable  structure  organizations.  Not  only  do  the  decision  rules  and  the  information 
architecture  have  to  work  for  each  fixed  structure,  but  the  designer  has  to  deal  with  the 
problem,  a  metaproblem,  of  coordinating  the  variability.  This  becomes  a  particularly  difficult 
problem  in  organizations  that  exhibit  sub.stantial  complexity  and  redundancy  in  their 
information  structure.  The  redundancy  is  necessary  both  for  robustness  and  for  flexibility  and 
reconfigurability.  In  order  to  address  these  problems  two  main  tasks  were  defined;  they  are 
described  in  the  next  section.  In  addition,  some  basic  work  in  algorithms  and  Colored  Petri 
Nets  needs  to  done  to  develop  tools  and  techniques  for  supporting  the  analysis  and  design. 

2.  STATEMENT  OF  WORK 

The  statement  of  work,  as  outlined  in  the  proposal,  is  given  below. 

Task  1:  Consistency  and  Completeness  in  Distributed  Decision  Making 

Develop  a  methodology  for  analyzing  and  correcting  the  set  of  decision  rules  used  by  an 
organization  with  distributed  decision  making.  The  methodology  is  to  be  based  on  the 
modeling  of  the  set  of  decision  rules  in  the  form  of  a  Colored  Petri  Net  and  on  the 
analysis  of  the  net  using  S-invariant  and  Occurrence  graphs.  The  ability  to  verify  and 
correct  the  set  of  decision  rules  has  direct  impact  on  the  extent  of  coordination  needed  in 
an  actual  organization  and  the  resulting  communication  load. 

Task  2:  Variable  Structures:  Heuristic  rules  in  the  Lattice  Algorithm 
Constraints 

Develop  a  methodology  for  considering  additional  constraints  in  the  Lattice  Algorithm. 
Such  constraints  include  the  degrees  of  redundancy  and  complexity  at  the  different 
proce.ssing  nodes  (to  be  derived  from  the  DPS  algorithm  of  Andreadakis),  the  projected 
response  time  of  the  organization,  ands  some  user-specified  constraints  on  connections 
between  decision  making  units.  Develop  a  procedure  for  checking  the  validity  of  such 
constraints  and  incorporate  them  in  the  Lattice  Algorithm.  Generalize  the  approach  to 
multilevel  organizational  structures  and  to  variable  structures,  where  variable  structures 
are  obtained  by  folding  together  different  fixed  structures.  The  real  focus  of  the  task  is  to 
introduce  these  additional  constraints  as  a  way  of  containing  the  dimensionality  problem 
inherent  in  flexibility  and  reducing  the  coordination  requirements. 

Design  a  symbolic  interface  for  the  Lattice  algorithm.  The  interface  would  have  the 
capability  of  interpreting  natural  language  inputs  entered  by  the  user  and  will  include 
some  symbolic  processing.  The  system  will  generate  the  interconnections  matrices  used 
as  input  to  the  Lattice  algorithm.  The  designer  would  then  use  the  various  tests  described 
in  the  proposal  (such  as  DFS  algorithm)  to  check  the  validity  of  the  interconnection 
constraints  and  to  make  required  modifications. 


-2- 


Task  3:  Information  Dissemination 


Semiannual  progress  reports  are  submitted  in  place  of  annual  reports.  The  results  of  this 
research  will  appear  in  thesis  reports  and  in  technical  papers  to  be  presented  at 
professional  meetings  and  published  in  archival  journals.  In  addition,  oral  presentations 
will  be  given  periodically  ad  arranged  with  ONR. 


3.  RESEARCH  PLAN 

The  research  plan  describes  the  strategy  for  meeting  the  program  objectives.  Specifically  the 
research  plan  is  organized  around  a  series  of  specific  well-defined  research  tasks  that  are 
appropriate  for  theses  at  master’s  and  Ph.D.  levels.  Individual  students  are  assigned  to  each 
task  under  the  supervision  of  the  principle  investigator.  Additional  staff  from  the  C3I  Center 
are  included  in  the  project  whenever  there  is  a  specific  need  for  their  expertise. 

The  focus  of  the  task  1  is  the  development  of  a  methodology  for  analyzing  and  verifying  the  set 
of  decision  rules  used  by  an  organization  with  distributed  decision  making.  The  methodology 
is  based  on  the  modeling  of  the  decision  rules  in  the  form  of  Colored  Petri  Net  and  on  the 
analysis  of  the  net  using  S-invariant  properties  and  Occurrence  graphs.  The  results  obtained  for 
the  two  analyses,  when  applied  to  a  specific  form  of  decision  rules,  have  been  presented  in  the 
previous  report.  During  the  reporting  period,  the  results  were  extended  to  decision  rules 
expressed  in  First-Order  Predicate  Calculus.  The  next  task  is  to  further  extend  these  results  for 
a  general  form  of  rule  bases  that  are  expressed  either  in  Predicate  Calculus  or  First-Order 
Predicate  Calculus.  This  work  is  being  done  by  A.  Zaidi  as  part  of  his  Ph.D.  dissertation. 

Task  2  has  been  initiated  and  focused  on  the  consideration  of  additional  constraints  for  small 
non-variable  organizations  (case  studied  by  Remy,  where  the  number  of  decision  makers  is 
less  than  5).  The  consideration  of  degrees  of  redundancy  and  complexity  at  different 
processing  nodes,  the  projected  response  time  of  the  organization,  and  the  consideration  of 
user-defined  constraints  on  connections  between  decision  making  units  were  investigated.  The 
inclusion  of  these  constraints  does  not  introduce  any  drastic  changes  in  the  way  the  problem  of 
generating  feasible  structure  is  approached  by  the  Lattice  Algorithm.  The  approach  needs  to  be 
generalized  to  multilevel  structures  and  variable  structures.  This  generalization  will  be  the  focus 
of  the  effort  during  the  next  period. 

A  second  issue  identified  in  the  previous  report  that  affects  directly  the  use  of  the  Lattice 
algorithm  in  task  2  is  computation  of  S-invariants  and  extension  of  the  algorithm  to  the 
determination  of  deadlocks  and  traps  in  the  organizational  structure.  The  results  obtained 
during  this  effort  have  also  been  used  in  task  1.  Ms  Jin  has  completed  her  Master’s  thesis  on 
this  subject;  the  technical  report  is  in  preparation. 


4.  STATUS  REPORT 

In  the  context  of  the  project  tasks  and  research  plan  outlined  above,  a  number  of  specific 
research  tasks  have  been  formulated.  Each  research  task  is  discussed  below.  Detailed  results 
for  some  of  the  research  tasks  have  already  been  presented  in  the  previous  semi-annual  report. 
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4.1  CONSISTENCY  AND  COMPLETENESS  IN  DISTRIBUTED  DECISION 
MAKING 

Detailed  results  of  the  S-invariant  and  Occurrence  graph  analyses  applied  to  a  Colored  Petri  Net 
representation  of  a  rule  base  has  already  been  presented  in  the  previous  report.  The  two 
analyses  have  been  shown  to  uncover  hidden  incomplete,  inconsistent,  circular,  redundant,  and 
subsumed  cases  in  a  set  of  decision  rules  expressed  originally  as  statements  in  either 
Propositional  Calculus  (PC)  or  First-Order  Predicate  Calculus  (FOPC).  During  this  reporting 
time  period  a  number  of  techniques,  presented  in  the  previous  report,  were  refined  and  checked 
for  any  overlooked  issues.  The  effort  resulted  in  some  slight  modification  (mostly  additions)  to 
these  algorithms.  It  has  been  stated  in  the  previous  report  that  the  techniques  presented  so  far 
are  applicable  to  rule  bases  expressed  as  statements  in  PC.  This  report  extends  the  results 
obtained  for  PC  systems  to  include  rules  bases  in  FOPC. 

For  the  rule  bases  in  First-Order  Predicate  Calculus  (FOPC),  the  Colored  Petri  Net  (CPN) 
representation  of  the  rule  base  is  first  converted  to  the  Associated  Petri  Net  (APN) 
representation.  The  APN  is  the  underlying  Petri  Net  structure  of  the  CPN  in  hand.  The  S- 
invariant  and  Occurrence  graph  analyses  presented  so  far  are  now  applied  to  the  APN  and 
results  from  the  two  analyses  are  applied  to  the  APN.  The  results  so  obtained  only  identify  the 
structures  of  the  PNs  that  correspond  to  potential  problematic  cases;  The  reported  cases  provide 
the  necessary  conditions  for  the  problematic  cases,  however,  one  needs  to  apply  further 
analysis  to  prove  the  sufficiency.  Once  the  potential  problematic  cases  are  reported  by  the  first 
phase  of  the  analysis,  a  second  phase  is  required  to  check  the  variable  assignments  of  the  terms 
involved  in  the  reported  cases  to  identify  the  real  problems.  The  following  sections  describe 
Phase  II  of  such  an  analysis  in  detail. 

4.1.1  S-Invariant  Analysis  for  FOPC  Systems 

The  following  steps  summarize  the  techniques  used  in  the  S-Invariant  analysis  of  the  APN 
corresponding  to  a  CPN  representing  a  rule  base  in  FOPC; 

•  For  a  rule  base  in  FOPC,  the  corresponding  CPN  is  converted  to  an  APN. 

•  Remove  all  the  dangling  places,  in  the  APN,  identified  during  detection  of 
incompleteness. 

•  Construct  the  Marked  Petri  Net  (MPN)  from  the  APN. 

•  Calculate  minimal  support  S-invariants  of  the  MPN. 

•  Search  calculated  minimal  supports  for  problematic  cases  (identified  in  previous 
reports). 

•  For  systems  in  the  restricted  form  of  FOPC  (4. 1 .  below),  report  the  problematic  cases, 
otherwise  perform  Phase  II  of  the  analysis  (sec  below). 

The  following  restricted  form  of  FOPC  does  not  require  any  further  analysis; 

Vx(a->P)  (4.1) 

where  a  and  P  are  literals  composed  of  unary  predicates  only;  the  terms  involve  only  one 
variable  x. 

The  reported  plausible  problematic  cases  from  the  first  phase  of  the  analysis  are  grouped  into 
the  following  two  sets: 

IR:  the  set  of  plausible  inconsistent  rules; 

CR:  the  set  of  plausible  circular  rules. 
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Phase  II 


As  mentioned  earlier,  the  definition  of  problematic  cases  is  more  involved  in  FOPC  than  the 
one  for  rules  in  PC.  The  application  of  the  algorithm  on  systems  which  are  originally  expressed 
in  FOPC  only  identifies  the  Petri  Net  structures  of  rules  that  might  have  problems.  This  section 
presents  algorithms  which  take  these  reported  cases  and  check  the  variable  assignments  and 
bindings  for  possible  erroneous  instantiations  of  the-se  rules.  If  such  an  assignment  or  binding 
is  found,  the  rule  is  declared  as  problematic.  The  algorithm  also  identifies  the  erroneous 
instantiations  of  the.se  rules;  this  information  might  help  an  expert  to  remove  the  errors  by 
putting  constraint  (exceptions)  on  variable  bindings.  The  algorithm  presented  in  this  section 
uses  the  following  technique. 

•  Construction  of  Generalized  Deduction  Tree 

The  approach  is  similar  to  the  Explanation-Based  Learning  (Mitchell  et.  al.,  1986,  1990; 
Dejong  and  Mooney,  1986,  1990;Tecuci,  1992). 

Algorithm  for  Inconsistent  Rules  (Case  I  &  III) 

(The  set  of  possible  inconsistent  rules  IR  is  given.) 

•  Construct  a  generalized  deduction  tree  with  the  help  of  rules  in  IR;  the  deduction  tree 
can  be  directly  constructed  from  the  CPN  representation  of  rules  in  IR. 

•  In  the  generalized  deduction  tree,  check  the  terms  associated  with  predicates  p  and  q, 
where  the  two  predicates  are  mutually  exclusive  (semantically  or  syntactically).  If  the 
terms  associated  with  these  predicates  are  identical,  the  set  of  rules  IR  is  in  fact 
inconsistent. 

•  In  case  the  set  is  not  identified  as  inconsistent,  calculate  the  variable  assignment  (if  one 
exists)  that  will  generate  an  inconsistent  instantiation  of  IR. 

The  following  example  illustrates  the  algorithm;  Consider  the  set  of  rules  (IRl)  that  is  reported 
as  (possibly)  inconsistent  during  the  first  phase  of  the  algorithm; 

Rl:  Vx  Vy  [A(x.  y)  A  B(y)  — >  C(x,  y)] 

R2:  Vu  Vv  [C(u,  v)  a  D(v,  u)  E(v,  u)] 

R3:  Vx  Vy  [E(x,  y)  a  F(y)  —>  ->A(y,  x)] 

The  CPN  representation  of  these  rules  is  given  in  Figure  1 . 


A 
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The  two  steps  of  constructing  the  generalized  deduction  tree  from  the  CPN  in  Figure  1  are 
illustrated  in  Figure  2.  The  first  deduction  tree  is  constructed  directly  from  the  CPN;  the  terms 
of  the  predicates  are  compared  at  each  node  in  the  tree  in  order  to  find  the  most  general 
unification  pattern  of  terms.  In  the  deduction  tree  (Figure  2),  the  comparison  of  the  terms  yields 
the  following  unification  patterns: 

E(v,  u)  =  E(x,  y)  [v(in  R2)  =  x(in  R3),  u(in  R2)  =  y(in  R3)] 

C(x,  y)  H  C(u,  v)  [x(in  Rl)  =  u(in  R2),  y(in  Rl)  =  v(in  R2)] 

The  most  general  unification  pattern  of  variables  will,  therefore,  be  given  as; 

[x(in  Rl)  =  u(in  R2)  =  y(in  R3),  y(in  Rl)  =  v(in  R2)  =  x(in  R3)] 

The  terms  in  R2  and  R3  are  modified  to  reflect  this  unification;  the  resulting  tree  is  the  most 
general  deduction  tree  and  is  also  shown  in  Figure  2.  Since  the  terms  of  Predicates  A  and  ->A 
are  identical,  the  set  IRI  is  in  fact  inconsistent. 

Consider  now  a  second  example  with  the  following  set  of  rules  (IR3)  that  is  reported  as 
(possibly)  inconsistent  during  the  first  phase  of  the  algorithm; 


Rl;  Vx  Vy  [A(x,  y)  A  B(y) D(x)] 

R2:  Vx  Vy  [C(y)  a  -lAfy,  x)  E(x)] 

R3;  Vx  Vy  [D(x,  y)  a  E(y)  F(x,  y)l 

The  CPN  representation  of  these  rules  is  given  in  Figure  3.  The  generalized  deduction  tree  is 
shown  in  Figure  4. 


Figure  2  Construction  of  Generalized  Deduction  Tree 
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A 


Figure  3  CPN  Representation  of  Rules 


F(x.y) 


A(x,y)  B(y)  -.A(y,  x)  C(y)  A(x.y1)  B(y1)  -’A(y2,y)  C(y) 

Figure  4  Construction  of  Generalized  Deduction  Tree 

The  set  of  rules  is  not  inconsistent  since  the  terms  associated  with  A  and  -'A  are  not  identical; 
they  represent  the  relation  or  property  between  two  different  set  of  objects  (constants). 
However,  the  following  instantiations  of  variables  in  R1  and  R2  will  introduce  an 
inconsistency; 

X  (in  Rl)  =  y  (in  R2) 
y(inRl)  =  x(in  R2) 

and/or 

X  (in  Rl)  =  X  (in  R2) 

y  (in  Rl )  =  y  (in  R2),  in  case  the  relation  A  is  symmetrical, 
i.e.,  A(x,  y)  =  A(y,  x) 

Algorithm  for  Circular  Rules 

( The  set  of  circular  rules  CR  is  given  together  with  the  minimal  support  <Xi>  of  MPN  that 
helped  identify  these  rules.) 

•  If  Vp,  p  e  <Xi>,  Tpl  =  1  in  the  original  CPN,  then  <Xi>  represents  a  deadlock  and  no 
further  analysis  is  required.  Report  the  case  as  erroneous. 

•  Construct  a  generalized  deduction  tree  with  the  help  of  rules  in  CR:  In  order  to  be 
consistent  with  the  definition  of  a  tree,  the  loop  in  CR  is  opened  by  duplicating  one  of 
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the  places  (selected  randomly),  p,  in  <Xi>.  The  deduction  tree  can  now  be  directly 
constructed  from  the  CPN  representation  of  rules  in  CR  with  one  node,  representing  p, 
appearing  twice. 

•  In  the  generalized  deduction  tree,  check  the  terms  associated  with  the  duplicated  node, 
p.  If  the  terms  as.sociated  with  these  predicates  are  identical,  the  set  of  rules  CR  is 
declared  circular. 

The  approach  is  illustrated  in  the  following  example.  Note  that  the  algorithm  described  above 
checks  a  single  iteration  of  the  circular  rules  to  determine  the  error.  There  might  be  cases  that 
are  circular  in  the  second,  third  or  n*^  iteration,  but  since  these  cases  do  generate  new 
assertions,  they  are  not  considered  erroneous  by  the  algorithm. 


Consider  the  following  example:  a  set  of  rules  (CR)  is  reported  as  (possibly)  circular  during  the 
first  phase  of  the  algorithm. 

Rl:  Vx  Vy  [A(x,  y)  a  B(y)  ->  C(x,  y)] 

R2:  Vu  Vv  [C(u,  v)  a  D(v,  u)  E(v,  u)] 

R3:  Vx  Vy  [E(x,  y)  a  F(y)  A(y,  x)] 

The  CPN  representation  of  these  rules  is  given  in  Figure  5.  The  shaded  place  and  arc  in  the  CPN 
represent  the  process  of  opening  the  loop  so  that  a  generalized  deduction  tree  can  be  constructed.  The 
generalized  deduction  tree  is  shown  in  Figure  6. 


D 


A(y.  X) 

XN 

E(x.  y)  F(y) 


A(y.  X)  B(x) 


Figure  6  Generalized  Deduction  Tree 
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The  terms  associated  with  predicate  A  in  the  deduction  tree  indicate  that  the  set  CR  in  fact 
consists  of  circular  rules. 

4.1.2  Occurrence  Graph  Analysis  for  FOPC  Systems 

As  was  the  case  with  S-invariant  analysis,  the  Occurrence  graph  analysis  presented  for  PC 
systems  is  applied  to  the  APN  representation  of  the  CPN  representing  a  rule  base  in  FOPC. 
During  this  initial  phase,  the  reported  cases  only  identify  the  Petri  Net  structures  of  rules  that 
might  have  problems.  This  section  presents  algorithms  which  take  these  reported  cases  and 
check  the  variable  assignments  and  bindings  for  possible  erroneous  instantiations  of  these 
rules.  If  such  an  assignment  or  binding  is  found,  the  rule  is  declared  as  problematic.  The 
algorithm  also  identifies  the  erroneous  in.stantiations  of  these  rules;  this  information  might  help 
an  expert  to  remove  the  errors  by  putting  constraint  (exceptions)  on  variable  bindings.  The 
algorithm  presented  in  this  section  uses  the  following  two  techniques; 

•  Construction  of  Generalized  Deduction  Tree 

•  Unification  of  Rules 

The  first  approach  has  already  been  presented  and  illustrated  in  the  previous  section.  The  first 
phase  of  the  Occurrence  graph  analysis  results  in  two  (or  more)  sets  of  rules  for  every 
identified  redundant,  subsumed,  and  conflicting  case.  The  approach  constructs  generalized 
deduction  trees  for  every  such  set  to  generate  the  most  general  expressions  representing  rules  in 
these  sets.  The  two  generalized  expression  are  compared  in  the  second  approach  to  establish 
the  existence  of  a  problem.  The  approach  unifies  the  variables  in  the  two  generalized 
expressions  and  compares  them  for  variable  assignments  that  might  lead  to  a  problematic 
instantiation. 

Algorithm  for  Redundant  Rules 

(Two  sets  of  rules  RRl  and  RR2  are  found  with  structures  representing  redundancy  — 
rules  in  RRl  are  redundant  in  the  presence  of  rules  in  RR2  and  vice  versa.) 

•  Construct  a  generalized  deduction  tree  for  rules  in  RR 1 .  Construct  another  generalized 
tree  for  the  rules  in  RR2. 

•  From  the  two  generalized  deduction  trees,  extract  the  most  general  form  of  the  rules  in 
the  two  sets  by  collecting  the  leaves  of  the  tree  as  premises  and  root  as  the  consequent. 

•  Unify  the  variables  in  the  terms  in  the  two  general  expressions  obtained.  If  unification 
results  in  two  identical  rules,  declare  the  rules  as  redundant. 

•  In  case  the  sets  are  not  identified  as  redundant,  calculate  the  variable  assignment  (if 
there  exists  one)  that  will  generate  a  redundant  instantiation  of  the  two  sets  of  rules. 

The  following  example  illustrates  the  algorithm:  Consider  the  following  two  sets  of  rules,  RRl 
and  RR2,  that  are  reported  as  possibly  redundant  during  the  first  phase  of  the  algorithm; 

RRl  consists  of  following  rules: 

Rl:  Vx  Vy  [A(x,  y)  a  B(x,  y)  D(x,  y)] 

R2:  Vx  Vy  [C(y,  z)  a  D(x.  y)  ->  F(x,  z)] 

RR2  consists  of  following  rules: 

R3:  Vx  Vy  Vz  [B(x,  y)  a  C(y,  z)  ->  E(x,  z)] 

R4:  Vx  Vy  Vz  [A(x.  y)  a  E(x.  z)  ->  F(x,  z)] 

The  CPN  representing  these  rules  is  shown  in  Figure  7. 
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The  two  steps  of  constructing  the  generalized  deduction  trees  from  the  CPN  in  Figure  7  are 
illustrated  in  Figures  8  and  9.  Figure  8  presents  the  generalized  deduction  tree  constructed  for 
the  rules  in  set  1^1,  while  Figure  9  shows  the  deduction  tree  for  the  rules  in  RR2. 

The  most  general  expression  representing  the  rules  in  RRl  is  obtained  by  collecting  the  leaves 
of  the  generalized  deduction  tree  (Figure  8)  as  the  premise  and  the  root  as  the  consequent.  The 
rule  obtained  as  a  result  is  giver  as: 

A(x,  y)  A  B(x,  y)  a  C(y,  z)  F(x,  z) 

Similarly,  the  most  general  rule  representing  the  set  RR2  is  given  as: 

A(x,  y)  A  B(x,  yl)  A  C(yl,  z)  -4  F(x,  z) 

The  terms  of  the  consequent  in  the  two  consequents  above  are  identical,  however,  a 
comparison  of  terms  in  the  premises  of  the  two  rules  reveals  the  fact  that  the  expression 
representing  RR2  is  more  general  than  the  one  for  RR2,  since  the  instances  covered  by  the 
rules  in  RRl  represent  a  subset  (for  y  =  yl)  of  all  the  instances  covered  by  the  rules  in  RR2. 
Therefore,  for  the  set  of  instances  covered  by  rules  in  both  the  sets,  the  two  sets  represent  a 
redundant  case. 


X  =  X 

y  =  y 

D(X,  y)  sD(x.  y) 


F(X,  z) 

/'N 


/\ 

A(x.  y)  B(x.  y) 


C(y.  z) 


F(x,  z) 


D(x,  y) 

/\ 


C(y.  z) 


A(x,  y)  B(x,  y) 

Figure  8  Generalized  Deduction  Tree  For  Rules  In  RRl 
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Figure  9  Generalized  Deduction  Tree  For  Rules  In  RR2 


Algorithm  for  Subsumed  Rules 

(Two  sets  of  rules  SRI  and  SR2  are  found  with  structures  representing  subsumed  cases  — 
rules  in  SR  1  are  subsumed  by  the  rules  in  SR2.) 

•  Construct  a  generalized  deduction  tree  for  rules  in  SRI .  Construct  another  generalized 
tree  for  the  rules  in  SR2. 

•  From  the  two  generalized  deduction  trees,  extract  the  most  general  form  of  the  rules  in 
the  two  sets  by  collecting  the  leaves  of  the  tree  as  premises  and  the  root  as  the 
consequent. 

•  Unify  the  variables  in  the  terms  in  the  two  general  expressions  obtained.  If  unification 
results  in  a  situation  that  the  terms  in  expression  representing  SR2  are  identical  to  the 
terms  in  SRI  corresponding  to  predicates  common  in  both  expressions,  declare  the 
rules  as  subsumed. 

•  In  case  the  sets  are  not  identified  as  sub.sumed.  calculate  the  variable  assignment  (if 
there  exists  one)  that  will  generate  a  subsumed  instantiation  of  the  two  sets  of  rules. 

The  following  example  illustrates  the  algorithm:  Consider  two  sets  of  rules.  SRI  and  SR2. 
where  SRI  is  reported  to  be  possibly  subsumed  by  the  rules  in  SR2  during  the  first  phase  of 
the  algorithm; 

SRI  consists  of  following  rules; 

Rl:  Vx  Vy  [A(x.  y)  A  B(x,  y)  — >  D(x,  y)] 

R2:  Vx  Vy  [C(y,  x)  a  D(x.  y)  — >  F(x.  y)] 

SR2  con.si.sts  of  following  rule: 

R3;  Vu  Vv  [A(u.  v)  a  B(u.  v)  — >  F(u.  v)] 

The  CPN  representing  these  rules  is  shown  in  Figure  10. 

A  Rl  D 
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Since  there  is  only  one  rule  in  SR2,  there  is  no  need  to  construct  the  generalized  deduction  tree 
for  SR2.  The  only  rule  in  SR2,  R3,  is  the  most  general  expression  representing  the  set.  The 
generalized  deduction  tree  for  the  rules  in  SRI  is  shown  in  Figure  1 1.  The  generalized 
expression  corresponding  the  set  is  given  as: 

A(x.  y)  A  B(x,  y)  a  C(y,  x)  Ftx,  y) 

The  unification  of  terms  applied  to  the  two  expressions  yields  { x/u,  y/v ) . 


F(x.  y) 


X  =  X 

y  =  y 

D(x,  y)  =  D(x,  y) 


C(y.  X) 


/\ 


L 


A(x.  y) 


B(x.  y) 


^  D(x,  y) 

^/\ 


F(x,  y) 


C(y,  X) 


A(x.  y)  B(x.  y) 

Figure  1 1  Generalized  Deduction  Tree  For  Rules  In  SRI 


The  terms  in  the  rule  representing  SR2  when  modified  to  reflect  this  unification  make  the  rule 
look  like 

A(x,  y)  A  B(x,  y)  F(x,  y) 
which  in  fact  subsumes  the  rules  in  SRI . 


Algorithm  for  Conflicting  Rules  (Case  II) 

(Two  sets  of  rules  CRI  and  CR2  are  found  with  structures  representing  inconsistency  — 
rules  in  CRI  are  in  conflict  with  the  rules  in  CR2.) 

•  Construct  a  generalized  deduction  tree  for  rules  in  CR 1 .  Construct  another  generalized 
tree  for  the  rules  in  CR2. 

•  From  the  two  generalized  deduction  trees,  extract  the  most  general  form  of  the  rules  in 
the  two  sets  by  collecting  the  leaves  of  the  tree  as  premises  and  the  root  as  the 
consequent. 

•  Unify  the  variables  in  the  terms  in  the  two  general  expressions  obtained.  If  unification 
results  in  two  rules  with  identical  premises  and  identical  terms  for  the  conflicting 
predicates  in  the  consequents,  declare  the  rules  as  conflicting  (case  II). 

•  In  case  the  sets  are  not  identified  as  conflicting,  calculate  the  variable  assignment  (if 
there  exists  one)  that  will  generate  a  conflicting  instantiation  of  the  two  sets  of  rules. 

As  an  example  consider  the  following  two  sets  of  rules,  CRI  and  CR2,  that  are  reported  in 
conflict  during  the  first  phase  of  the  algorithm; 

CRI  consists  of  following  rules: 

Rl:  Vx  Vy  [pl(x,  y)  A  p2(x)  Ap3(y,  x)  a  p4(y)  ->  A(x,  y)] 

CR2  consists  of  following  rules: 

R2:  Vu  Vv  [pl(u,  v)  a  p2(u)  -4  p5(u,  v)] 

R3:  Vx  Vy  [p3(x,  y)  a  p4(x)  ->  p6(x,  y)] 

R4:  Vx  Vy  [p5(x,  y)  a  p6(y,  x)  B(y,  x)] 
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where  A  and  B  are  defined  as  mutually  exclusive  concepts;  p  =  { A  ,B ) . 


The  CPN  representing  these  rules  is  shown  in  Figure  12. 


Figure  1 2  CPN  Representation  of  Rules 

Since  there  is  only  one  rule  in  CRI ,  there  is  no  need  to  construct  a  generalized  deduction  tree  of 
CRl.  The  generalized  deduction  tree  for  the  rules  in  CR2  is  shown  in  Figure  13. 

The  most  general  rule  representing  the  set  CR2  is  given  as: 

pl(x,  y)  A  p2(x)  Ap3(y,  x)  a  p4(y)  B(y,  x) 


B(y,x) 


_B(y.x) 


p6(y.  X) 

/\ 


p3(y.  X)  p4(y) 

Figure  1 3  Generalized  Cteduction  Tree  For  Rules  In  CR2 
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A  comparison  of  the  rule  in  CRl  with  the  general  expression  representing  CR2  reveals  that 
although  the  two  premises  are  identical,  but  the  consequents  of  the  two  rules  are  not  in  conflict 
provided  the  predicates  A  and  B  are  not  symmetric.  In  case  the  two  concepts  are  symmetric, 
i.e.,  A(x,  y)  =  B(y,  x),  the  sets  CRl  and  CR2  are  in  conflict. 


4.2  VARIABLE  STRUCTURES:  HEURISTIC  RULES  IN  THE  LATTICE 
ALGORITHM  CONSTRAINTS 

4.2.1  Including  User  Heuristics  rules  in  the  Lattice  Algorithm 


The  lattice  algorithm  allows  the  automatic  generation  of  candidate  architectures  satisfying  a  set 
of  connection  constraints  and  of  structural  constraints.  The  candidate  architectures  (which  are 
numerous)  are  not  listed  singly  but  gathered  in  lattices  defined  by  their  largest  and  their  smallest 
element:  the  maximally  and  minimally  connected  architectures  (MAXOs  and  MINOs).  Each 
candidate  architecture  belongs  to  one  or  more  of  the  lattices  and  can  be  defined  by  addition  of 
simple  paths  to  the  MINO  or  the  subtraction  of  simple  paths  from  the  MAXO.  The  initial 
implementation  of  the  work  of  Remy  (1986)  was  limited  to  5  Decision  Making  Units  or  DMUs 
(the  size  that  could  be  handled  by  a  1  MB  Macintosh  Plus).  More  recent  work  by  Zaidi  (1992) 
has  gone  beyond  this  limitation  by  introducing  a  layered  representation  of  the  architecture,  thus 
allowing  for  an  arbitrary  number  of  DMUs. 

The  input  of  the  lattice  algorithm  is  a  set  of  connection  constraints  represented  by  matrices:  e 
(input  to  the  organization),  s  (output  of  the  organization),  F  (SA  to  IF  stages),  G  (RS  to  SA 
stages),  H  (RS  to  IF  stages),  and  C  (RS  to  Cl  stages).  The  architecture  designer  enters  in  each 
cell  of  the  different  matrices  either "  1 "  if  he  wants  the  corresponding  connection  to  exist,  "0"  if 
he  does  not,  or  "2"  if  the  corresponding  link  is  optional.  If  n  is  the  number  of  Decision  Making 
Units  (DMU)  considered  by  the  user,  the  initial  number  of  elements  in  the  set  of  possible 
structures  is  For  5  DMUs,  there  are  2’°  possible  structures.  Each  time,  the  user 

specifies  "  1 "  or  "0"  in  one  cell  of  the  matrices,  the  number  of  elements  of  the  set  of  possible 
structures  is  divided  by  2.  After  executing  the  Lattice  Algorithm,  the  set  of  feasible  structures 
has  much  fewer  elements  than  the  original  set.  The  workload  of  the  architecture’s  designer  has 
been  reduced  because  instead  of  looking  at  the  entire  set,  he  can  concentrate  only  on  the 
boundaries  defined  by  the  MINOs  and  MAXOs.  When  he  has  identified  a  pair  of  MINO  and 
MAXO  that  contains  interactions  that  seem  appropriate  for  the  specific  application,  he  can 
further  investigate  the  lattice  connecting  tho.se  two  structures.  The  problem  is  that  the  number 
of  feasible  structures  is  still  extensive  and  not  easily  manageable. 

The  set  of  feasible  structures  can  be  further  reduced  by  taking  into  account  in  the  Lattice 
Algorithm,  heuristics,  rules  and  requirements  that  are  currently  used  later  in  the  design  process. 
Currently,  the  architecture  designer  has  to  specify  a  set  of  interactions,  run  the  Lattice 
Algorithm  to  get  the  boundaries  of  the  set  of  feasible  structures  defined  by  the  MINOs  and 
MAXOs,  and  use  some  kind  of  heuristics  and  rules  to  discard  further  feasible  architectures  to 
obtain  a  manageable  set  of  architectures.  On  this  final  set,  the  designer  can  carry  out  some 
performance  analysis  to  assess  whether  the  obtained  architectures  satisfy  a  set  of  predetermined 
requirements.  The  focus  of  this  task  is  to  translate  some  of  these  rules,  heuristics  and 
requirements  into  additional  constraints  that  become  part  of  the  input  data  in  the  Lattice 
Algorithm.  Then  these  constraints  will  be  satisfied  in  the  automated  architecture  generation 
process. 
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After  a  brief  description  of  the  Lattice  Algorithm,  three  types  of  additional  constraints  that  could 
be  included  in  the  Lattice  Algorithm  are  presented.  The  first  one  deals  with  the  consideration  of 
requirements  on  the  degrees  of  redundancy  and  complexity  desired  in  the  architecture.  The 
second  one  takes  into  account  response  time  requirements.  The  last  one  addresses  some  user- 
defined  rules  that  limit  the  types  of  interaction. 

Brief  Overx’iew  of  the  Lattice  Algorithm 

From  the  interaction  constraints  entered  by  the  u.ser  in  the  different  matrices,  the  algorithm 
generates  two  Petri  nets:  the  Kernel  Net  corresponding  to  the  structure  deduced  from  the 
connection  matrices  where  ail  the  optional  links  are  considered  inactive  and  the  Universal  Net 
corresponding  to  the  structures  where  all  optional  links  are  considered  active. 

In  a  second  stage,  the  algorithm  computes  the  S-invariants  of  the  Universal  Net  and  stores 
those  that  contain  the  source  place  and  the  sink  place  (the  simple  paths). 

In  a  third  stage,  MINOs  are  generated  by  adding  simple  paths  stored  in  the  second  stage  to  the 
Kernel  Net  until  all  the  structural  constraints  are  satisfied.  Remy  has  defined  four  basic 
structural  constraints: 

R 1  The  structure  should  be  connected 

R2  The  structure  is  acyclical  (no  loop) 

R3  There  exists  at  most  one  link  from  the  RS  stage  of  DMj  to  the  SA,  IF,  Cl  stage  of  DMj: 

Gjj  +  Hjj  +  Cjj  <  1 

R4  Information  Fusion  takes  place  only  at  the  IF  and  Cl  stages.  The  SA  stage  has  at  most 
one  input  with  preference  to  external  input:  ej  -i-  Gy  <  1 

In  a  fourth  stage,  MAXOs  are  generated  by  keeping  removing  simple  paths  from  the  Universal 
Net  until  none  of  the  constraints  are  violated. 

Finally,  the  algorithm  computes  the  invariants  of  the  different  MINOs  and  MAXOs  to  check  the 
absence  of  loops.  If  there  is  a  loop,  the  MINO  or  the  MAXO  is  discarded. 

Redundancy  and  Complexity 

Redundancy  and  Complexity  are  two  aspects  of  importance  in  the  design  of  architecture. 
Redundancy  is  related  to  the  dissemination  of  information  in  the  organization  for  back-up 
purposes.  While  redundancy  is  desirable  for  survivability  and  reliability,  it  is  limited  by  the 
communications  network  capacity.  Complexity  addresses  the  problem  of  fusion  of  information 
from  different  sources.  The  more  sources,  the  more  complex  the  fusion  process  and  the  more 
resource-consuming  the  process  is.  The  architecture  designer  has  to  deal  with  these  two 
parameters  and  perform  some  tradeoffs.  The  more  redundancy  is  introduced,  the  more  complex 
fusion  algorithms  will  be  or  the  more  resources  will  be  needed. 

Remy  (1986)  gives  an  interpretation  of  MINOs  and  MAXOs.  MINOs  represent  organization 
with  a  minimal  number  of  interactions  between  DMUs.  They  represent  not  very  survivable 
architectures  because  there  is  no  redundancy  to  disseminate  received  or  generated  information 
throughout  the  system.  However,  they  represent  timely  organizations.  On  the  other  hand. 
MAXOs  represent  architectures  with  a  lot  of  redundancy,  but  that  are  less  timely.  An 
interesting  feature  for  the  Lattice  Algorithm  would  be  to  take  into  account  redundancy  and 
complexity  requirements  in  the  generation  process  of  feasible  structures.  Stamos  Andreadakis 
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(1988)  described  an  alternative  methodology  to  generate  architectures.  After  defining  basic 
Information  Flow  Paths,  he  introduced  the  concepts  of  degree  of  Complexity  at  Fusion  nodes 
and  degree  of  Redundancy  at  Processing  nodes.  Redundancy  is  related  to  the  number  of 
Information  Flow  Paths  that  receive  data  generated  from  a  Processing  node  while  Complexity 
is  related  to  the  number  of  Information  Flow  Paths  that  send  data  to  a  Fusion  Node.  The 
definition  of  these  degrees  of  redundancy  and  complexity  is  the  basis  for  the  generation  of  a  set 
Data  Flow  Structures  from  which  architectures  can  be  derived  by  allocating  functions  to 
decision  makers. 

The  concept  of  complexity  and  redundancy  can  be  applied  to  the  five  stage  model  of  the 
Decision  Making  Unit  (Levis,  1993).  The  Situation  Assessment  and  Response  Selection  stages 
can  be  considered  as  Processing  nodes  while  Information  Fusion  and  Command  Interpretation 
stages  are  Fusion  nodes.  The  task  Processing  stage  has  no  external  interactions  so  that  it  does 
not  appear  in  the  Lattice  Algorithm;  consequently,  it  will  be  ignored  in  what  follows  without 
any  loss  of  generality.  We  can  define  SARj  (resp.  RSRj)  as  the  degree  of  redundancy  of  the 
SA  (resp.  RS)  stage  of  DMUj.  SARj  (resp.  RSRj)  is  equal  to  the  number  of  output  places  of 
the  transition  representing  the  SA  (resp.  RS)  stage  of  DMUj.  We  can  also  define  IFQ  (resp. 
CICj)  as  the  degree  of  complexity  of  the  IF  (resp.  Cl)  stage  of  DMU;.  IFCj  (resp.  CICj)  is 
equal  to  the  number  of  input  places  of  the  transition  repre.senting  the  IF  (resp.  Cl)  stage  of 
DMUj.  If  n  is  the  number  of  DMUs,  using  the  connection  matrices  of  the  Lattice  Algorithm  , 
these  degrees  can  expressed  as: 


SARi  = 


l  +  ^Fij  if  stage  IFi  exists 
i=i 

n 

^Fii  if  stage  IFi  does  not  exist 

RSRi  =  si  +  ^Gii  +  Hij  +  Gj 
i=i 

n 

l  +  ^Fii  +  Hii  if  stage  SAj  exists 

n 

+  if  stage  SAj  does  not  exist 

.  i  =  l 

In 

l  +  ^Cij  if  stage  IFj  exists 

i  =  l 

n 

^Cij  if  stage  IFj  does  not  exist 


IFQ  = 


CICi  = 


The  Lattice  Algorithm  u.ses  a  specific  labeling  for  each  place  and  for  each  transition  as  shown 
on  Figure  14.  The  computation  of  the  S-invarlants  results  in  the  generation  of  1  x  m  vectors. 
Each  entry  corresponds  to  a  place  of  the  Universal  Net  and  takes  the  value  1,  if  the  place  is 
included  in  the  S-invariant,  0  if  it  is  not.  This  vector  representation  is  also  used  for  structures 

obtained  by  adding  (joining)  simple  paths.  The  join  operation  is  noted  by  u.  and  we  have: 

[X,  ...  Xj  ...  Xn]  u  [Y,  ...  Yi ...  Yn|  =  [(X,  or  Y,  ),  ...  (Xj  or  Yj)  ...(Xn  or  Yp)] 

where  Xj,  Yj  €  {0,1 )  and  Xj  or  Yj  =  0  if  Xi  =  0  and  Yj  =0 

Xj  or  Yj  =  I  otherwise. 
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Thus,  a  structure  is  also  represented  by  a  vector,  each  entry  corresponding  to  a  place  of  the 
Universal  Net  and  taking  value  I  if  the  place  is  included  in  the  structure,  0  if  it  is  not. 
Therefore,  it  is  possible  to  define  the  degrees  of  redundancy  and  complexity  of  a  structure  in 
term  of  the  values  taken  by  the  entries  of  its  vector  representation.  If  we  denote  by  Pxyzi(s)  the 
function  that  gives  the  value  of  the  entry  corresponding  to  place  Pxyzt  in  the  vector 
representation  of  the  structure  s,  we  have: 


SARi(s)  =  P2i(s)  +  5^P2M(s) 

j=l 

n 

RSRi(s)  =  P5i(s)  +  ^PsiiKs)  +  P5ij2(s)  +  P5ij.i(s) 

i=i 

i’'' 

IFCi(s)  =  P2j(s)  +  XP2ii(s)  +  P5ij2(s) 

i  =  l 

CIQ(s)  =  P.ij(s)  +  ^P,^u.<s) 

i  =  l 
i^j 


pli  tii  p2i  t2i  p3t  131  p4i  t4i  pSi 


Figure  14  Labeling  of  Places  and  Transitions  in  the  Lattice  Algorithm 


The  architecture  designer  can  specify  ranges  for  the  different  degrees  of  redundancy  and 
complexity  for  the  architecture  he  envisions.  These  ranges  will  introduce  additional  constraints 
that  the  Lattice  algorithm  will  check  in  the  same  way  as  it  checks  constraints  R3  and  R4. 

The  different  degrees  can  not  be  Fixed  arbitrarily  because  they  are  functions  of  each  others:  The 
definition  minimal  degree  of  redundancy  requires  the  definition  of  minimal  degree  of 
complexity  to  make  sure  that  each  interaction  place  created  to  meet  the  redundancy  requirements 
will  not  violate  the  complexity  requirements.  The  first  constraint  is  that  if  n  is  the  number  of 
decision  making  units,  the  different  degrees  have  to  satisfy: 

0<SARi<n  0<RSRi<n  0<IFCj<n  0<CICj<n 
On  the  other  hand,  we  have: 
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J^SARi  +  ^RSRi  =  J^P2,+  +  P5ij2  +  Psij-l 

»=I  i=l  i=l  1=1  i=l  i=l  i=l  }=i 

X  IFCj  +  Ciq  =  X  P2J  +  X  X  (P2«  +  P5M2)  +  X  P3j  +  X  X 

j=l  j=l  j=l  j=l  i=l  J=l  j=l  i  =  l 

i*j  i*i 

and  therefore: 

XSARi  +  XRSRi  =  XlFCi  +  XCIG  -  ip’‘+Ep>'+ii  PsiJI 

i  =  I  i  =  l  i  =  l  i=l  i=l  i  =  l  i  =  l  j=l 

This  relation  between  the  different  degrees  is  much  more  complex  than  the  one  derived  by 
Andreadakis.  It  can  not  be  used  before  running  the  Lattice  Algorithm  because,  once  the  ranges 
of  the  degrees  have  been  specified,  it  is  impossible  to  know  before  hand,  if  places  P3i,  Psj  and 
Psiji  exist  or  not. 

It  is  easy  to  show  that  these  new  constraints  are  convex.  The  addition  of  a  simple  path  to  a 
structure  will  only  increase  some  of  those  different  degrees  by  1 .  If  s  is  a  structure  and  p  is  a 
simple  path,  we  will  have; 

Vi  €  {I,  ...,  n},  SARi(s)  <  SARjfs  u  p)  <  SARi(s)  +  1 
Vi  e  {], ...,  n},  RSRi(s)  <  RSRjfs  u  p)  <  RSRi(s)  +  1 

Vj  €  {I . n},  IFCj(s)  <  lFCj(s  u  p)  <  IFCj(s)  +  1 

Vj  €  {1,  ...,  n},  ClCj(s)  <  CICj(s  u  p)  <  ClCj(s)  +  1 

Therefore,  if  we  denote  by  c  the  operation  that  satisfies: 

[X,  ...  Xi  ...  Xn,]  c  [Y,  ...  Yi  ...  Y„,]  if  Vi  €  { 1 . m},  Xi  <  Yi 

it  is  easy  to  deduce  that  if  si  c  s2  then: 

Vi  €  {1 . n},  SARi(sl)  <  SARi(s  2) 

Vi  €  {1,  ...,  n},  RSRi(sl)  <  RSRi(s2) 

Vje  {1,  ...,n},IFCj(sl)<IFCj(s2) 

Vj  e  {1,  ...,  n},  ClCj(sl)  <  CICj(s2) 

and  we  have  for  all  s  such  that  si  c  s  c  s2; 

Vi  €  {1,  ...,  n},  SARi(sl)  <  SARi(s  )  <  SARi(s2) 

Vi  6  {1 . n},  RSRi(sl)  <  RSRKs)  <  RSRi(s2) 

VJ  €  {1 . n},  IFCj(sl)  <  IFCj(s)  <  IFCj(s2) 

VJ  €  {1,  ...,  n},  ClCj(sl)  <  ClCj(s)  <  CICj(s2) 

From  the  convexity  properties  we  have  Just  addressed,  we  can  deduce  that  there  exist  feasible 
architectures  that  satisfy  all  the  constraints  if  and  only  if  there  exists  a  MINO  for  which  the 
different  degrees  of  complexity  and  redundancy  are  smaller  than  the  upper  boundaries  defined 
by  the  architecture  designer  and  there  exists  a  MAXO  for  which  these  degrees  are  larger  than 
the  lower  boundaries. 
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The  output  of  the  updated  Lattice  Algorithm  will  be  a  new  set  of  MINOs  and  MAXOs  that  will 
define  boundaries  of  lattices  included  in  the  ones  generated  by  the  Lattice  Algorithm  without 
these  new  constraints  (if  these  constraints  are  binding). 

Let  us  illustrate  these  concepts  in  an  example  from  Remy  (1986):  the  Warfare  Commander 
Problem.  This  organization  has  5  DMUs.  DMU|  and  DMU2  act  as  the  sensors  of  the 
organization  (Sonar  Operator  (SO)  and  Radar  Operator  (RO)  for  example).  They  both  receive 
information  from  the  external  environment  (threat  detection).  They  may  or  may  not  share  this 
information.  However,  DMU|  has  to  send  this  information  to  DMU3  which  acts  as  the 
Executive  Coordinator  (EXCO) .  Finally,  DMU4.  the  Anti-Air  Warfare  Commander  (AAWC) 
and  DMU5,  the  Anti-Submarine  Warfare  Commander  (ASWC)  produce  the  organization's 
response  (firing  of  missiles  for  AAWC  or  torpedoes  and  depth  charges  for  ASWC).  They 
receive  orders  from  the  coordinator  DMU^  and  may  receive  information  from  DMU|  and 
DMU2.  They  may  also  share  their  results.  The  connection  matrices  corresponding  to  this 
description  of  the  organization  is  displayed  in  Figure  15. 
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Figure  15  Connection  matrices  for  the  Example 


The  Lattice  Algorithm  computes  40  invariants  and  produces  10  MINOs  and  3  MAXOs  that  are 
listed  in  Table  1.  Table  I  lists  also  the  different  degrees  of  redundancy  and  complexity 
computed  with  the  formula  defined  above. 
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Table  1  List  of  MINOs  and  MAXOs  with  their  degrees  of  redundancy  and  complexity 


Let  us  assume  that  in  order  to  meet  communications,  processing  and  survivability 
requirements,  the  architecture  designer  specifies  that: 


SAR,  =  2  SAR2  =  2 

RSR|<2  RSR2<2  RSR3=  2  RSR4  =  I  RSR5  =  1 

IFC,  =  2  IFC2  =  2  IFC3  =2  IFC4  <  1  IFC5  <  1 

CIC,  =  1  CIC2  =  1  CIC3  =  1  CIC4  =  2  CIC5  =  2 

From  Table  1,  we  can  conclude  that  none  of  the  MINOs  satisfies  the  architecture  designer 
requirements  biecause  SAR|  and  SAR2  for  those  MINOs  are  all  less  than  or  equal  to  1  and  none 
of  the  MAXOs  satisfies  those  requirements  because  IFC4  and  IFC5  for  the  MAXOs  are  larger 
than  or  equal  to  2.  However,  a  set  of  feasible  structures  exists  because  there  exists  a  MINO 
(for  example  MINO  8)  for  which  the  degrees  of  redundancy  and  complexity  are  smaller  than 
the  maximal  requirements,  and  there  exists  a  MAXO  (for  example  M2)  for  which  the  degrees 
of  redundancy  and  complexity  are  larger  than  the  minimal  requirements.  To  get  the  new  set  of 
MINOs  and  MAXOs  that  satisfy  these  requirements,  more  simple  paths  need  to  be  added  to  the 
current  MINOs  and  other  simple  paths  need  to  be  subtracted  from  the  MAXOs.  Let  us  consider 

the  MINO  m8  and  MAXO  M2  displayed  in  Figure  16  and  17.  We  have  m8  c  M2. 


MINO  m8  does  not  satisfy  the  constraints  SAR|  =  2  SAR2  =  2  IFCi  =  2  and  IFC2  =  2. 
Adding  a  simple  path  containing  the  interaction  place  between  SAl  and  IF2  (pi  22)  and  places 
that  are  already  in  the  structure  will  increase  SAR|  and  IFC2  by  1  and  leave  the  other  degrees 
unchanged.  In  the  same  way,  adding  a  simple  path  containing  the  interaction  place  between 
SA2  and  IFl  (p221)  and  places  that  are  already  in  the  structure  will  increase  SAR2  and  IFC|  by 
I  and  leave  the  other  degrees  unchanged.  Adding  these  two  appropriate  simple  paths  will  result 
in  a  MINO  for  the  complete  set  of  constraints.  TTtis  new  MINO  is  displayed  in  Figure  1 8. 
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Figure  17  MAXOM2 


MAXO  M2  violates  the  constraints  RSRi  <  2,  RSR2  ^  2.  RSR5  =  1.  IFC4  <  1,  and  IFC5  <  1 
Here  again,  by  removing  appropriate  simple  paths  that  contain  undesirable  interaction  places,  a 
MAXOs  satisfying  the  complete  set  of  constraints  can  be  reached.  Figure  19  displays  one  of 
the  new  MAXO  that  can  be  reached  by  removing  simple  paths. 


Figure  18  New  MINO  Reached  by  Adding  Simple  Paths  to  m8 


Figure  19  New  MAXO  Reached  by  Removing  Simple  Paths  from  M2 

The  process  we  have  just  described  is  the  process  used  by  the  Lattice  Algorithm  to  generate 
feasible  architecture:  it  keeps  adding  simple  paths  to  the  Kernel  net  until  all  the  constraints  are 
satisfied  to  generate  the  set  of  MINOs  and  it  keeps  subtracting  Simple  Path  from  the  Universal 
Net  until  none  of  the  constraints  are  violated.  These  new  constraints  on  complexity  and 
redundancy  will  be  easy  to  include  in  the  software  application  of  the  algorithm  since  it  will  not 
change  the  global  process  of  MINO  and  MAXO  generation. 

Response  Time 

Response  time  is  a  critical  measure  of  performance  that  is  always  considered  by  the  architecture 
designer  in  selecting  the  final  set  of  candidate  structures.  Timed  Petri  Nets  are  a  tool  that  allows 
to  assess  if  the  response  time  of  an  architecture  will  be  less  than  a  given  time  requirement.  This 
new  constraint  can  be  handled  easily  by  the  Lattice  Algorithm. 

Once  the  source  and  sink  places  are  merged  together,  the  Petri  Nets  handled  by  the  Lattice 
Algorithm  are  marked  graphs.  Million  (1986)  showed  that  the  response  time  of  the  system  is 
equal  to  the  largest  sum  of  the  delays  of  the  transitions  of  the  S-component  of  the  S-invariants 
of  the  Petri  Net.  Therefore,  the  first  step  is  to  associate  a  delay  with  each  transition  that 
corresponds  to  the  amount  of  time  required  to  perform  the  process  the  transition  represents. 

The  second  .step  is  to  compute  the  delay  as.sociated  with  each  Simple  Path  computed  by  the 
Lattice  Algorithm  and  discard  those  who.se  delay  is  larger  than  the  required  response  time.  The 
lattice  algorithm  will  then  be  executed  with  this  subset  of  Simple  Paths  and  a  smaller  set  of 
solutions  will  be  generated.  All  the  solutions  of  this  set  will  satisfy  the  requirements. 

Let  us  describe  the  procedure  on  the  Warfare  Commander  example  described  in  the  previous 
section.  As  said  earlier,  the  Lattice  Algorithm  generates  40  simple  paths  /  invariants  for  the 
connection  constraints  specified  in  Figure  15.  The  minimal  support  of  these  40  invariants  are 
listed  in  Table  2. 
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Table  2  Minimal  Support  of  the  Warfare  Commander  Problem 


JEL 

Minimal  Support 

1 

Po-to'P  1  r  •  1  r  P2 1  -*2 1  -Pt  r  *3 1  -P4 1  -U  rPS  1 42424-P34't34-P44-t44-P,S4‘*5-Pft 

2 

Po-tfl-p  1 2-1 1  2‘P22 1  -*2 1  'P.r  r  1.3  r  P4 1  -U 1  -P3  l42-t24-P34-l34-p44-U4-P54-*5-P6 

3 

Po-*0-P  1  r*  1  rP2 1 2->22-P32'*32-P42-l42-P5242-t24-P34-l34-P44-*44-P54-l5-P6 

4 

Po-to-Pl  2'*  1 2-P22-*22-P32-t32-P42-U2-P5242-'24-P34-l34-P44-*44-P34-l3-P6 

5 

P0-t0-Pn-MrP2\-hrP3rl3|-P4rUrP5132-t23-P33-V33-P43-U3-P3343-t34-P44-U4-P34-l5-P6 

6 

Po-lO'P  1 2-<  1 2-P22  r  <2 1  ■P3  r  *3 1  -P4 1  -U 1  -PS 1 32'b3-P33-'33-P43-l43-P5343-*34-P44-U4-P54-t5-P6 

7 

Po-ln-P  1 1 1 1 -P2 1 2-'22-P32-*32-P42-<42-P5232-'23-P33-l33-P43-U3-P3343-l34-P44-U4-P54-t3-P6 

8 

P0-t0-PT2-l|2-P22-l22-P32-l32-P42-<42-P5232'<23-P33-*33-P43-U3-P5343-t34-P44-U4-P.S4-t.S-P6 

9 

Po-tO'P  1 1  -•  1  r  P2 1  -12  r  P3 1  -'3 1  -P4 1  -<4  rP3 1 52-<25-P35-t35-P45-U5-PS5->5-P6 

10 

Po-'o-P  1 2-1 1 2-P22 1  -*2 1  -P3 1  -*3 1  -P4 1  -*4 1  -P5 1 ,32-t25-P35-l35-P45-l45-P53-'5-P6 

1  1 

P0-*0-P  1 1  -1 1 1  -P2 1 2-l22-P32-l32-P42-l42-P5252-l25-P35-t35-P4S-U5-P55-'5-P6 

12 

Po-lo-Pl2-t|2-P22-<22-P32-l32-P42-l42-PS252-<25'P35-t35-P45-l4.S-P55-ls-P6 

13 

Po-lfl-P  1 1  -•  1 1  -P2 1  -*2 1  -P3 1  -13 1  -P4 1  -14 1  -P51 32-t23-P33-l33-P43-t43-P5353-l35-P45-l4.S-P55-l5-P6 

14 

Po-lfl-P  1 2-1 1 2-P22 1  -*2 1  -P3 1  -*3 1  -P4 1  -14 1  -PS 1 32-l23-P33-t33-P43-t43-P5353-l35-P45-U.S-P55-t5-P6 

15 

PO-lQ-P  M -1 1 1 -P21 2-l22-P32-l32-P42-l42-P5232-l23'P33-l33-P43-l43-P5353-l35'P45-U5-P.S5-l5-P6 

16 

P0-t0-Pl2-ll2-P22-l22-P32-l32-P42-t42-P5232-l23-P33-l33-P43-t43-P5353-l35-P45-U5-P55-ls-P6 

17 

P0-*0-P  11  ->  1 1  ■P2 1  -l2  r  P3 1 -I3 1  -P4 1 -I4 1  -P5 1 42-l24-P34-t34-P44-t44-P.S452-*23-P3S-l35-P45-U5-P55-l5-P6 

18 

Po-<n-P  1 2-1 1 2-P22 1 -I2 1  -P3 1  'I3 1  -P4 1 -I4 1  -P?  1 42-I24-P34-I34-P44-I44-P5452-I25-P35-I35-P45-I45-P55-I5-P6 

19 

P0-lo-Pirll1-P2l2-*22-P32-l32-P42-l42-P3242-t24-P34-l34-P44-l44-P5432-l25-P35-l35-P43-l4S-P55'l5-P6 

20 

Po-lo-Pl2'l|2-P22-l22-P32-l32-P42-l42-P5242-l24-P34-l34-P44-l44-P5452-l25-P35-l35-P45-l45-P5.S-l5-P6 

21 

PO-'o-P  1 1 -1 1 1 -P2 1 -I2I -P3 1 -I3 1 -P4I -I4I -P5 1 32-l23-P33-l33-P43-l43-P5343-l34-P44-l44-P5452-l25-P35-l35-P45-l45-P55- 
1S-P6 

PO-lfl-P  1 2-1 1 2'P22 1 -I2 1  -P3 1 -I3 1  -P4 1 -I4 1  -P5 1 32-l23-P33-l33-P43-l43-P5343-l  34-P44-l44-P5452-l2S-P35-l35-P45-t45-P55- 
I5-P6 

PO-lfl-P  1 1 -1 1 1 'P2 1 2-l22-P32'l32-P42-'42-P3232-l23-P33'l33-P43-l43-P3343-l34-P44-l44-P545:-l25-P35-l35-P4.S-l43-P55- 
I3-P6 

P0-'0-Pl2-l|2'P22-l22-P32-l32-P42-l42-PS232-l23-p33-l33-P43'l43-P.3343-l34-P44-l44-P5452-l25-P35-l35-P45-l45-P5.3- 

l3-Pfi 

22 

23 

24 

25 

PO-lfl-P  1 1 -1 1  rP2 1 -'2 1 -P3 1 -1 3 1 -P41 -I4I -PS  l42-l24-P34-l34-P44-t44-P5432-l23-P33-l33'P43-l43-P5353-l35-P4?-l4S-P55- 

'3-P6 

Po-lQ-P  1 2-1 1 2'P22I -12 1 -P3 1 -131  ■P4I -I41 -PS  l42-l24-P34-l34-P44-l44-P5432-l23-P33-l33-P43-l43-P5353-l35-P45-l45-PSS- 
13-Pfi 

PO-l0-Pirl|I-P2l2-l22-P32'l32-P42-l42-P.‘>242-l24-P34-l34-P44-l44-P5432-l23-P33-l33-P43-l43'P33.‘>3-l3S-P45-l45-P55- 

I3-P6 

Po-lo-Pl2-l|2'P22-l22-P32-l32-P42-l42-P3242-l24-P34-l34-P44-l44-P.'>432-l23-P33-l33'P43-l43-P53.S3-l35-P4?-l45-P55- 

l3-Pft 

Pn-lfl-Pl  1 -1 1 1 -P2 1 -I2 1  •P3 1 -I3 1 -P4 1 -I41 -P3 1 52-I25-P35-1 35-P4.3'l45-P5542-l24-P34-l34-P44-l44-P54-l5-P6 

26 

27 

28 

29 

30 

Pn-lfl-Pl  2-1  r  2'P22 1 -I2 1 -P3 1  13 1 -P4I -Ul -P3 1  ?2-l23-P33-l35-P43-l4.->-P5.S42-l24-P34-l  34-P44-l44-P.’>4-l3-Pft 

31 

Pn-lo-Pl  |-1|  rP2l2-l22-P32-l32-P42-l42-P‘'232-l25-P33-l33-P4S-l43-P5S42-l24-P34-l34-P44-l44-P54-l.S-P6 

32 

P0-l0-Pl2-l|2-P22-l22-P32-l32-P42-l42-P3232-l25-P35-l35-P43-l4S-P5342-l24-P34-l34'P44-l44-P34-l5-P6 

33 

PO-lfl-P  1 1 -1|  1 -P2 1 -I2 1 -P3 1 -13 1 -P4 1 -I4 1 -P5 1 32-l23-P33-l33-P43-'43-P3  33  3-I35-P45-I45-P3342-I24-P34-I34-P44-I44-P54- 
t3-P6 

34 

PO-lQ-P  1 2-1 1 2-P22  rl2 1  -P  3 1 -I3 1  -P4 1 -I4 1  -P3 1 32-I23-P  33-I33-P43-I43-P5  33  3-I33-P45-I43-P5542-I24-P34-1 34-P44-l44'P54- 
l3-P6 

Po-lo-Pl  |-1|  |-P2l2-l22-P32-l32-P42-l4i-P3232-l23-P33-l33-P43-l43-P3333-l33-P43-l43-P3342-l24-P34-l34-P44-l44-P34- 
l3-P<i 

P0-ln-Pl2-l|2-P22-l22-P32-l32-P42-l42-P3232-l23-P33-l33-P43-l43-P3333-l33-P43-l43'P3342-l24-P34-l34-P44-l44-p34- 

I3-P6 

Pn-lfl-Pl  |-1|  I-P2I-I2 |-P3 1-131 -P4|-l4|-P3l32-l23-P33-l33-P43'l43-PS332-l23-P33-l33-P43-l43-P3343-l34-P44-l44-p34- 
I3-P6 

Po-ln-Pl2-l|2-P223-l21-P31-l31-P4|-l41-P3l32-l23-P33-l33-P45-l45-P3332-l23-P33-l33-P43-l43-P3343-l34-P44-t44'P34- 

I3-P6 

Po-lo-Pl  |-ll|-P2l2-l22-P32-l32-P42-l42-P3232-l23-P33-l33-P43-l43-P3332-l23-P33-l33-P43-l43-P3343-l34-P44-l44-P34- 
I3-P6 

Pn-lfl-P  1 2-1  l2-P22-l22-P32-'32-P42-l42-P3232-l23-P33-'33-P43-l43-P3332-l23-P33-l33-P43-l43P3  343-1 34-P44-I44-P34- 
I3-P6 

35 

36 

37 

38 

39 

40 
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If  we  specify  that  the  response  time  of  the  organization  has  to  be  less  than  80  seconds  and  that 
the  delays  associated  with  each  processes  are  defined  as  follows: 


to  =  0 


fSAI  =  0 

,  =  I0 

t|FI 

=  t21  = 

5 

ten  = 

=  t3l 

=  0 

tRSI  = 

=  t4|  = 

10 

tSA2  =  0 

2=  10 

t|F2 

=  t22  = 

5 

ten  = 

=  t32 

=  0 

tRS2  = 

=  t42  = 

10 

tlF3 

=  t23  = 

10 

tei3  = 

=  t33 

=  0 

tRS3  = 

=  t43  = 

10 

t|F4 

=  t24  = 

10 

tei4  = 

=  t34 

=  5 

tRS4  = 

=  t44  = 

10 

hF5 

=  t25  = 

10 

tei5  = 

=  t35 

=  5 

tRS5  = 

=  t45  = 

10 

t5  =  0 


The  delays  associated  with  each  simple  path  are: 


Tl  = 

to  + 

til 

+ 

t21  + 

t3l 

+ 

t4l 

+ 

t24  + 

t34  + 

t44  + 

t5  = 

50 

T2  = 

t0  + 

tl2 

+ 

t21  + 

t31 

+ 

t41 

+ 

t24  + 

t34  + 

t44  + 

t5  = 

50 

T3  = 

to  + 

til 

+ 

t22  + 

t32 

+ 

t42 

+ 

t24  + 

t34  + 

t44  + 

t5  = 

50 

T4  = 

t0  + 

tl2 

+ 

t22  + 

t32 

+ 

t42 

+ 

t24  + 

t34  + 

t44-F 

t5  = 

50 

T5  = 

tO  + 

til 

+ 

t21  + 

t3l 

+ 

t4l 

+ 

t23  + 

t33  + 

t43  + 

t34 

F  t44  -F 

t5 

=  60 

T6  = 

t0  + 

tl2 

+ 

t21  + 

t3l 

+ 

t41 

4- 

t23  + 

t33  + 

t43  + 

t34- 

F  t44  + 

t5 

=  60 

T7  = 

t0  + 

tll 

+ 

t22-»- 

t32 

+ 

t42 

+ 

t23  + 

t33  + 

t43-F 

t34 

F  t44  + 

t5 

=  60 

T8  = 

to  + 

tl2 

+ 

t22  + 

t32 

+ 

t42 

+ 

t23  + 

t33  + 

t43  + 

t34- 

F  t44  + 

t5 

=  60 

T9  = 

t0  + 

tll 

+ 

t2l  + 

t31 

+ 

t4l 

+ 

t25  + 

t35  + 

t45  + 

t5  = 

50 

TIO: 

=  t0 

Ftl2 

Ft21  ■ 

Ft31  ■ 

f  t41 

Ft25- 

F  t35  ■ 

Ft45- 

Ft5: 

=  50 

Til  : 

=  to- 

Ml 

1 

f  t22- 

F  t32  - 

f  t42- 

f  t25- 

F  t35  ■ 

Ft45- 

Ft5: 

=  50 

T12  =  to  +  tl2  +  t22  +  t32  +  t42  +  t25  +  t35  +  t45  +  t5  =  50 
TI3  =  to  +  tl  I  +  t2l  + 131  +  t4l  + 123  + 133  + 143  + 135  + 145  + 15  =  60 

T14  =  to  +  tl2  +  t21  +  t31  +  t4l  +  t23  +  t33  +  t43  +  t35  +  t45  +  t5  =  60 

T15  =  to  +  tl  I  +  t22  +  t32  + 142  +  t23  + 133  + 143  + 135  +  t45  + 15  =  60 

TI6  =  to  +  tl  2  + 122  +  t32  + 142  +  t23  +  t33  + 143  + 135  + 145  + 15  =  60 


TI7 

= 

to 

+ 

tll 

-F 

t2l 

+ 

t31 

+ 

14 1 

+ 

t24 

+ 

t34 

+ 

t44 

+ 

t25 

+ 

t35 

+ 

145  + 

15  =  75 

T18 

to 

+ 

tl2 

+ 

t21 

+ 

t3l 

+ 

t41 

+ 

t24 

+ 

t34 

+ 

t44 

+ 

t25 

+ 

t35 

+ 

t45  + 

t5  =  75 

T19 

= 

to 

+ 

tl  1 

+ 

t22 

+ 

t32 

+ 

t42 

+ 

124 

+ 

t34 

+ 

t44 

+ 

125 

+ 

t35 

+ 

t45  + 

t5  =  75 

T20 

= 

to 

+ 

tl2 

+ 

t22 

+ 

132 

+ 

t42 

+ 

t24 

+ 

134 

+ 

t44 

-F 

t25 

+ 

135 

-F 

t45  + 

t5  =  75 

T2I 

= 

to 

-F 

tll 

+ 

121 

+ 

t3l 

+ 

t4l 

+ 

t23 

+ 

t33 

+ 

t43 

+ 

t34 

+ 

t44 

+ 

125  + 

t35  + 145 

+ 

t5 

= 

85 

T22 

= 

to 

+ 

tl2 

+ 

t2l 

+ 

t31 

+ 

t41 

+ 

t23 

+ 

t33 

+ 

t43 

+ 

t34 

+ 

t44 

-F 

t25  + 

t35  + 145 

+ 

t5 

= 

85 

T23 

= 

to 

+ 

tl  1 

-F 

t22 

+ 

t32 

+ 

t42 

+ 

123 

+ 

t33 

+ 

t43 

+ 

t34 

+ 

t44 

-F 

t25  + 

t35  + 145 

+ 

t5 

= 

85 

T24 

= 

to 

+ 

tl2 

+ 

t22 

+ 

t32 

+ 

t42 

+ 

t23 

+ 

t33 

+ 

t43 

+ 

t34 

+ 

t44 

+ 

t25  + 

t35  + 145 

+ 

t5 

= 

85 

T25 

= 

to 

-F 

tll 

+ 

t2l 

+ 

t3l 

+ 

141 

+ 

124 

+ 

134 

+ 

t44 

+ 

t23 

-F 

t33 

-F 

t43  + 

135  + 145 

+ 

t5 

= 

85 

T26 

= 

to 

+ 

tl2 

+ 

t21 

+ 

131 

+ 

t41 

+ 

t24 

+ 

t34 

+ 

t44 

+ 

123 

+ 

133 

+ 

t43  + 

t35  + 145 

+ 

t5 

= 

85 

T27 

= 

to 

+ 

tll 

-F 

t22 

+ 

t32 

+ 

t42 

+ 

t24 

+ 

134 

+ 

t44 

+ 

t23 

+ 

t33 

+ 

t43  + 

t35  + 145 

+ 

t5 

= 

85 

T28 

= 

to 

+ 

tl2 

+ 

122 

-F 

132 

+ 

t42 

+ 

t24 

+ 

t34 

+ 

t44 

+ 

t23 

+ 

133 

+ 

t43  + 

t35  + 145 

+ 

t5 

= 

85 

T29 

= 

to 

+ 

tll 

+ 

t2l 

+ 

t31 

+ 

t4l 

+ 

125 

+ 

t35 

+ 

t45 

+ 

124 

+ 

134 

+ 

144  + 

t5  =  75 

T30 

= 

to 

+ 

tl2 

+ 

t21 

+ 

t3l 

+ 

t41 

+ 

125 

+ 

t35 

+ 

t45 

+ 

t24 

+ 

t34 

+ 

t44  + 

t5  =  75 

T3I 

= 

to 

+ 

tll 

+ 

t22 

+ 

t32 

+ 

t42 

+ 

t25 

+ 

t35 

+ 

t45 

+ 

t24 

+ 

134 

+ 

t44  + 

t5  =  75 

T32 

= 

to 

+ 

tl2 

+ 

t22 

+ 

132 

+ 

t42 

+ 

t25 

-F 

135 

-F 

t45 

+ 

t24 

+ 

t34 

+ 

t44  + 

t5  =  75 

T33 

= 

to 

+ 

tll 

+ 

t2l 

+ 

t3l 

+ 

t41 

+ 

123 

+ 

133 

-F 

t43 

+ 

t35 

+ 

t45 

+ 

t24  + 

t34  + 144 

+ 

t5 

= 

85 

T34 

= 

to 

+ 

tl2 

+ 

t2l 

+ 

t3l 

+ 

t4l 

+ 

t23 

+ 

t33 

+ 

t43 

+ 

t35 

+ 

145 

+ 

t24  + 

t34  + 144 

+ 

t5 

= 

85 

T35 

= 

to 

+ 

tl  1 

+ 

t22 

-F 

t32 

+ 

t42 

-F 

123 

+ 

133 

+ 

t43 

+ 

135 

+ 

145 

-F 

124  + 

t34  + 144 

+ 

t5 

= 

85 

T36 

= 

to 

+ 

tl2 

+ 

t22 

+ 

132 

+ 

t42 

+ 

t23 

+ 

133 

+ 

143 

+ 

t35 

+ 

t45 

+ 

t24  + 

t34  + 144 

+ 

t5 

= 

85 

T37 

= 

to 

+ 

tll 

+ 

t2l 

+ 

t31 

+ 

141 

+ 

125 

+ 

135 

+ 

t45 

+ 

t23 

+ 

t33 

+ 

t43  + 

l34  + 144 

+ 

t5 

= 

85 

T38 

= 

to 

+ 

112 

+ 

t2l 

-F 

t3l 

+ 

t4l 

+ 

125 

+ 

t35 

+ 

t45 

+ 

t23 

+ 

133 

+ 

t43  + 

134  + 144 

+ 

t5 

= 

85 

T39 

= 

to 

+ 

tll 

+ 

t22 

+ 

t32 

+ 

142 

-F 

125 

+ 

t35 

-F 

145 

+ 

t23 

+ 

t33 

+ 

t43  + 

t34  + 144 

+ 

t5 

= 

85 

T40 

= 

to 

+ 

tl2 

+ 

t22 

+ 

132 

+ 

142 

+ 

t25 

-F 

135 

+ 

t45 

+ 

123 

+ 

t33 

+ 

t43  + 

t34  + 144 

+ 

15 

= 

85 
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One  can  see  that  14  simple  paths:  21,  22,  23.  24.  25,  26,  27,  28,  33,  34,  35.  36,  37,38,  39, 
and  40  have  an  associated  delay  of  85  seconds,  and  therefore  any  generated  structure 
containing  at  least  one  of  these  simple  paths  will  have  a  response  time  of  85s  which  is  larger 
than  the  80  seconds  required.  These  simple  paths  need  therefore  to  be  discarded  and  the  Lattice 
Algorithm  will  construct  the  feasible  structures  by  combining  the  26  remaining  simple  paths. 

The  resulting  set  of  solutions  will  be  smaller.  For  example.  MAXO  M2  displayed  in  Figure  17 
contains  Simple  Paths  33,  34,  35  and  36  that  have  been  discarded.  The  violation  of  the 
respon.se  time  requirements  comes  from  the  fact  that  DMU  4  has  to  wait  for  DMU5  to  produce 
its  response  before  starting  its  task.  By  subtracting  these  Simple  Paths,  a  new  MAXO  M'2 
satisfying  the  response  time  requirement  is  obtained  and  is  displayed  in  Figure  20. 


1  SA2 

IF2 

0 

H 

C12 

hOH 

RS2 

1 

c 

0 

1.  J 

^  IF3 

CI.1 

RSi 

h*o 


Figure  20  New  MAXO  M'2 


User-Defined  Rules 

User-defined  rules  include  different  heuristics  used  by  the  architecture  designer  to  describe 
characteristics  of  the  envisioned  architecture.  Some  of  them  translate  directly  into  the  settings  to 
I  or  0  of  some  cells  of  the  connection  matrices.  In  the  example  de.scribed  in  section  3.  the  fact 
that  "DMU|  has  to  send  his  information  to  DMU3"  results  in  setting  to  1  the  cell  H)3. 

Currently  the  Lattice  Algorithm  does  not  allow  the  taking  into  account  of  conditional  links  of 
the  kind:  "if  interaction  Xij  exists  then  the  interaction  Yjk  exists"  or  "either  link  Xij  or  Yj^ 
exists.”  An  approach  is  proposed  to  use  techniques  from  Integer  Programming  (IP)  to  translate 
conditions  and  logical  relations  on  interactions  into  constraints  that  will  be  checked  by  the 
Algorithm.  Let  us  look  at  two  examples  illastrating  two  IP  techniques: 

a)Either-Or  constraints 

In  a  linear  program  where  we  want  to  en.sure  that  at  least  one  of  the  two  constraints 

f(X|,  X2 . Xn)  <  0  and  g((X|,  X2,  ...,  Xn)  <  0  is  satisfied,  we  use  the  following  IP 

formulation: 
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f(X|,  X2 . Xn)  <  yM 

g(xl,  X2 . Xn)  <  (l-y)M 

where;  y  =  0  or  I  and  M  is  large  enough  so  that 

f(X|.  X2 . Xn)  <  M  and  g(Xi,  X2,  Xn)  <  M 

for  all  values  of  xl,  x2 . xn. 

The  statement  "either  link  Fij  or  Hij  exists"  is  equivalent  to  the  statement  "either  1-Fij  <  0  or  1- 
Hij  <  0"  that  can  be  formulated  as: 

1  -  Fij  <  y 
1  -Hij<(l-y) 

where  y,  Fij,  Hy  €  {0,1 }.  (M=l  is  large  enough). 

By  adding  these  two  inequalities,  we  can  eliminate  y  and  we  get: 

Fij  +  Hij  >  1 

It  is  impossible  to  have  both  Fij  =  0  and  Hij  =  0.  This  type  of  constraint  can  be  added  to  the  set 
of  constraints  checked  by  the  Lattice  Algorithm. 

b)  If-Then  constraints 

When  a  situation  occurs  where  we  want  to  ensure  that  if  a  constraint  f(X|,  X2, Xn)  >  0  is 
satisfied  then  the  constraint  g(X|,  X2, Xn)  >  0  is  satisfied,  the  following  formulation  in  IP 
is  used: 

-  g(X|,  X2 . Xn)  <  My 

f(X|,  X2,  ...,  Xn)  <  M(1  -  y) 

where:  y  =  0  or  1  and  M  is  large  enough  so  that 
f(x|,  X2,  ...,  Xn)  <  M  and  -  g((X|,  X2, Xn)  <  M 
for  all  values  of  xl,  x2,  ...,  xn. 

The  statement  "If  interaction  Fij  exists  then  interaction  H^i  exists"  is  equivalent  to  the  statement 
"if  Fij  >  0  then  Hki  - 1  >  0"  that  can  be  formulated: 

-(Hki-  l)<y 
Fij<(l  -y) 

where  y,  Fij,  Hki  g  {0,1 }.  (M=l  is  large  enough). 

By  adding  these  two  inequalities  we  can  eliminate  y  and  we  get: 

Fij  -  Hki  ^  0  where  Fij,  Hki  e  {0,1 }. 


The  interpretation  is  as  follows: 

If  Fij  =  0  then  Hki  =  0  or  Hki  =  I 
If  Fij  =  1  then  Hw  =  1 

which  is  exactly  what  is  required. 

Let  us  generalize  this  approach  to  more  complex  constraints.  In  what  follows,  capital  letters  (A, 
B,  ...)  denote  cells  of  the  connection  matrices  e,  s,  F,  G,  H  or  K.  A  indicates  that  the 
connection  A  must  exist  (A=l).  ->A  indicates  that  the  connection  A  must  not  exist  (A=0).  User 
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defined  constraints  can  then  be  expressed  in  terms  of  a  logical  formula  that  uses  the  operators 
-I  (not),  A  (and),  v  (or),  — >  (implies  /  if-then). 

These  operators  have  the  following  properties: 


Aa(BaC)  =  (AaB)aC  =  AaBaC 
Av(BvC)  =  (AvB)vC  =  AvBvC 
A  A  (B  V  C)  =  (A  A  B)  V  (A  A  C) 

A  V  (B  A  C)  =  (A  V  B)  A  (A  V  C) 

A  — >  B  =  -lA  V  B 
~'(A  A  B)  =  “>  A  V  -iB 
-"(A  V  B)  =  -<  A  A  ->B 


A-associativity 

v-associativity 

A-distributivity 

v-distributivity 

DeMorgan's  Laws 


Using  these  properties,  any  logical  formula  can  be  transformed  into  a  Conjunctive  Normal 
Form  where  the  formula  is  expressed  as  the  conjunction  (operator  a)  of  disjunctions  (operator 
v).  For  example  (A  v  B)  a  (iA  v  C)  a  (B  v  -iD  v  E)  is  a  conjunctive  normal  form  because 

expressions  containing  only  operators  v  are  connected  with  operators  a.  The  first  step  of  the 
approach  is  therefore  to  transform  the  user  specified  constraint  into  a  Conjunctive  Normal 
Form.  Each  of  the  disjunctions  of  the  resulting  expression  can  then  be  processed 
independently.  A  disjunction  contains  a  finite  number  (m)  of  positive  literals  and  a  finite 
number  (n)  of  negative  literals.  Its  generic  form  is: 


--Ai  V  -.A2  V  ...  V  --An  V  An+1  V  An+2  V  ...  V  A„+n, 


which,  by  using  v-associativity,  can  be  rewritten  as: 

(-•A,  V  -.A2  V  ...  V  -<An)  V  (An+l  V  An+2  V  ...  V  An+m) 
and  by  using  the  first  DeMorgan's  law; 


-i(A|  A  A2  A  ...  A  An)  V  (An+l  V  An+2  ^  ...  V  An+m) 


Finally,  this  formula  can  be  rewritten: 


(Ai  a  A2  a  ...  A  An)  ->  (An+l  V  An+2  v  ...  v  An+m) 

Any  user  defined  constraints  can  be  expressed  in  terms  of  rules  of  this  type. 

Let  us  now  use  the  IP  formulation  to  derive  the  equation  to  be  included  in  the  set  of 
constraintsd  checked  by  the  Lattice  Algorithm: 

For  A I  A  A2  A  ...  A  An  to  be  true,  every  Aj  needs  to  equal  1  and  therefore,  we  must  have:  A\ 

+  A2  +  ...  +  An  =  n  . 

Similarly,  for  An+i  v  An+2  ^  ...  v  An+m  to  be  true,  at  least  one  of  the  An+j  has  to  equal  1  and 
therefore,  we  must  have: 


-28- 


An+1  +  An+2  •••  An+m  —  ^ 

To  use  the  "If-Then"  IP  formulation,  these  two  equations  need  to  be  rewritten  as; 

A I  +  A2  +  ...  +  Afi  -  n+1  >  0 
An+I  +  An+2  +  -  +  An+m  “1^0 

and  therefore,  the  formulation  is  as  follows: 

■Ap+I  -  An+2  "  •••  '  Ap+m  +1  ^  My 
A]  +  A2  +  ...  +  Ap  -  n+1  <  M(1  -  y) 

where:  y  =  0  or  1  and  M  is  large  enough  so  that 

-Ap+i  -  An+2  -  -  -  Ap+m  +1  <  M  and  A]  +  A2  +  ...  +  Ap  -  n+1  <  M 

for  all  values  of  A] . Ap+p,  . 

M  =  1  is  large  enough  and  we  have: 

■Ap+i  -  An+2  '  •••  ■  Ap+ni  +1  <  y 
Ai  +  A2  +  ...  +  Ap  -  n+1  <  1  -  y 

By  adding  these  two  inequalities  to  eliminate  y,  we  obtain; 

A|  +  A2  +  ...  +  Ap  -  n+1  <  Ap+i  +  An+2  +  —  +  Ap+m 

If  A|  A  A2  A  ...  A  Ap  is  true  then  Ai  =  1  for  all  i  and  the  equation  becomes  : 

1  ^  Ap+i  +  An+2  +  —  +  Ap+pi, 

requiring  that  at  least  one  of  the  Ap+j  =  1 . 

If  A|  A  A2  A  ...  A  Ap  is  false  then  there  exists  an  i  in  {1,  ...,  n}  such  that  Aj  =  0  and 
therefore: 

A|  +  A2  +  ...  +  Ap  -  n+1  <  0  <  Ap+i  +  An+2  +  —  +  Ap+p, 
and  the  Ap+j  can  take  any  values. 

The  interesting  aspect  of  this  approach  is  that  it  generates  constraints  that  can  be  easily  checked 
by  the  Lattice  Algorithm,  in  the  same  way  it  checks  constraints  R3  and  R4. 


4.2.2  Deadlocks  and  Traps 

A  detailed  introduction  to  the  issues  involved  in  this  task  have  been  presented  in  the  last 
progress  report  together  with  a  brief  description  of  the  algorithm  for  calculating  the  deadlock 
and  traps  for  a  general  Petri  Net  structure.  The  algorithm  has  been  finalized  during  this 
reporting  period  and  extended  for  Hierarchical  Petri  Net  structures.  As  a  result  Ms.  Jin  has 
completed  her  Master's  thesis,  and  a  technical  report  containing  the  algorithms  and  their 
application  will  appear  soon.  A  detailed  description  of  the  deadlock  and  trap  algorithm  is 
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presented  in  this  report.  The  extension  of  this  algorithm  to  Hierarchical  Petri  Nets  will  appear 
in  the  technical  report. 

Algorithm 

Given  a  net  N  =  (  P,  T,  I,  O),  n  =  I  P  I ,  m  =  I T  I ,  the  extended  incidence  matrix  of  the  net  N  is 
C.  In  is  an  identity  matrix  with  dimension  equals  to  the  number  of  places  in  the  net  N.  The 
algorithm  starts  by  constructing  the  matrix  [!„  ,  C]  and  evolves  to  [Dj ,  Rj].  [!„  ,  C]  will  be 
modified  by  linear  combinations  of  its  rows.  Matrix  Dj  includes  place  sets  of  deadlock 
supports  of  net  Nj,  where  Nj  denotes  the  net  obtained  by  taking  transitions  t|,...,  tj  into 
account  in  the  PPR  matrix  (already  de.scribed  in  the  previous  report).  Matrix  Rj  represents  the 
PPR  matrix  that  originated  from  the  extended  incidence  matrix.  In  short,  [Dj ,  Rj  ]  is  the  matrix 
obtained  after  the  i-th  iteration  in  the  following  algorithm.  After  the  m-th  iteration.  Dm  includes 
the  deadlock  support  for  the  net  Nm,  which  is  the  net  N,  and  Rm  shows  the  PPR  matrix  of 
certain  place  sets  in  net  N.  Some  redundancy  in  the  statement  of  the  deadlock  supports  may 
occur.  T^ey  will  be  eliminated  in  the  algorithm. 

Deadlock  Algorithm 

Step  1  Initialization; 

Construct  the  matrix  [!„,€]. 

Let  Do  =  In  ;  Ro  =  C  ;  i=  0 , 

Initial  Checking: 

Check  all  rows  in  [Dq  ,  Rq  ]  to  determine  if  there  is  a  row  r  that  has  all  its  Rq  matrix 
elements  Rrj  ( j=  1  to  m)  be  negative  or  zero,  if  so,  append  this  whole  row  r  to  the 
matrix  [Do,  Ro  ]• 

Step  2  Iterations 

Repeat  for  i  =  1  to  m  (  m  is  the  number  of  transitions  in  net  N) 

-  Determine  J  =  ( j  I  Rjj  >  o  )  and  K  =  {  k  I  R^j  <  0) 

_  For  each  (j,  k)  of  J  x  K  ,  add  row  j  and  row  k  in  [Do ,  Ro  ]  element  by 
element.  The  adding  operation  of  Dj.j  matrix  and  Ri-i  matrix  follow  D 
matrix  union  rules  and  PPR  union  rules,  respectively;  then  append  the 
resulting  rows  to  the  matrix  [Dj.|,  Rj.]  ]. 

-  Suppress  all  the  rows  in  J  in  which  elements  Rjj  >0  ( j  €  J  ). 

-  Eliminate  from  [Dj ,  Rj  ]  the  identical  rows.  Two  rows  are  identical  if  and 
only  if  every  element  in  one  row  in  matrix  Dj.|  has  the  same  value  as  the 
corresponding  element  in  another  row  in  Dj.]. 

-  Now  we  have  a  new  matrix  [Dj,  Rj  ]. 

-  Go  to  the  Repeat  statement. 

Step  3  Check 

Check  rows  in  matrix  [D^ ,  Rm  ]•  Find  out  those  rows  in  Rm  in  which  every  element  in 
the  row  is  either  negative  or  zero.  The  corresponding  rows  in  Dm  represent  the  place 
sets  of  deadlock  supports.  If  there  are  no  such  rows  in  Rm,  then  this  net  does  not  have 
any  deadlock  supports,  which  means  there  are  no  deadlocks  in  this  net. 

Step  4  End  of  the  Algorithm. 
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If  we  need  to  determine  minimal  deadlocks,  then  we  can  eliminate  those  place  sets  that  have 
subsets  in  each  iteration  in  Step  2,  and  finally  all  minimal  deadlocks  can  be  determined  after  the 
end  of  the  algorithm. 

Pre -defined  Operation  Rules 

Because  the  purpose  of  using  Matrix  Di  (i=l, m)  is  to  keep  track  of  the  places  in  a  place  set 
that  could  be  the  deadlock  support  of  the  net  Rj  during  each  iteration,  the  union  operation  on 
matrix  Dj  is  basically  the  union  operation  of  Set  theory.  Therefore,  the  union  operations  on 
elements  in  Matrix  Dj  are  defined  as  follows  : 

1 .  Operation  rules  on  elements  in  matrix  Dj : 

a.  1  +  1  =  1, 0  +  0  =  0, 1  +  0=  1 

b.  These  rules  are  commutative. 

2.  PPR  Union  Operation  rules  for  matrix  Rj : 

The  operation  on  elements  in  Matrix  Rj  ( i=l,...,  m  )  are  used  to  compare  the  preset 
and  postset  of  a  place  or  a  place  set.  Each  time  a  transition  is  added,  the  preset  and 
postset  relations  may  change.  The  operation  rules  for  matrix  Rj  are  used  to  keep 
track  of  the  preset  and  postset  relations  whenever  a  new  transition  is  added.  These 
rules  are  defined  as  follows. 

1.  1  +  1  =  1; 

2.  0+0=0; 

3  1+0=1; 

4  (.l)  +  (-l)=-l; 

5  (-l)+l=-l; 

Interpretation  of  Results 
The  final  rows  in  matrix  D  are  the  place  sets  of  the  deadlock  supports.  If  we  need  to  find  all 
deadlocks  including  those  that  have  deadlock  supports  and  those  that  don’t,  one  way  to  do  this 
is  to  consider  all  combinations  of  deadlock  supports.  The  result  should  be  all  the  possible 
deadlocks.  Another  important  task  is  to  find  the  minimal  deadlocks  in  matrix  D.  To  achieve 
this,  all  we  need  to  do  is  to  compare  the  rows  in  the  final  matrix  Dm.  Those  place  sets  that 
contain  no  other  subsets  are  the  minimal  deadlocks  . 

Calculating  Trap  Supports 

To  calculate  the  trap  supports  in  an  ordinary  Petri  Net,  we  need  to  find  out  the  place  sets  whose 
preset  is  the  superset  of  its  postset. 

Example:  Given  a  strongly  connected  free  choice  net  N  shown  in  Figure  21 : 


pi  p3 


6  (-l)  +  0  =  -l; 

7  (-2)+l=-l; 

8  (-2)  +  (-l)  =  -l; 

9  (-2)  +  0=-l; 

10  (-2)  + (-2)  =  -! 
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Follow  the  algorithm  steps  described.  Each  step  is  shown  in  two  parts  as  follows:  The  left 
hand  side  shows  the  matrix  iterations,  and  the  right-hand  side  shows  the  net  Nj  that 
corresponds  to  i-th  iteration.  The  dashed-line  box  shows  the  columns  and  rows  in  the  current 
iteration. 

Step  I  ;  Initialization 

•  Construct  matrix  [!„,  C].  C  is  the  extended  incidence  matrix  of  net  N, 

In  is  the  identity  matrix,  n  =  I  P  I.  See  Figure  22. 

•  Let  Do  =  In,  Ro=  C. 

•  Do  represents  the  deadlock  supports  of  No  (  with  no  transitions) 

•  Check  all  the  rows  in  [Do,  Ro  ]•  There  is  no  row  with  all  its  Ro  matrix  elements 
negative  or  zero.  So  no  rows  are  appended  to  the  matrix  [Do,  Ro  ]• 


In 

c 

P1 

P3 

p1 

1 

0 

0 

0 

-1 

1 

0 

row  1 

0 

o 

P2 

0 

1 

0 

0 

1 

-1 

0 

row  2 

p3 

0 

0 

1 

0 

0 

1 

-1 

row  3 

0 

0 

p4 

0 

0 

0 

1 

0 

-1 

1 

row  4 

P2 

p4 

Do 

Ro 

No 

Figure  22  Initialization  -  Example 


Step  2  :  Iterations  : 

Iteration  I:  Add  transition  tl  to  net  No;  the  deadlock  supports  are  shown  in  matrix  Dp 
Rl  shows  the  preset-postset  relation  .  See  Figure  23. 


J=(jlRj,>0}={2}, 

K={klRM<0}={l}, 

Jx  K=  ((2,  I)}, 


Add  the  two  rows  in  J  x  K  (according  to  D;  matrix  union  rules  and  the 
Rj  PPR  union  rules),  then  append  the  resulting  row  5  to  the  matrix 
[Do,  Ro]- 

Suppress  the  rows  in  J,  which  in  this  case  the  only  row  is  2. 

There  are  no  identical  rows  in  [Dp  R|  ],  so  there  are  no  rows  to  be 
eliminated. 

Matrix  D|  contains  the  deadlock  supports  of  net  NI .  They  are  [pi }, 

{ p3 1 ,  [  p4 } .  and  { p  1 ,  p2 } .  Iteration  1  is  summarized  as  follows  ; 
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:  1 

0  0 
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-1 

1 

row  4 

1 

1  0 

0 

-1 

-1 

0 

row  5 

P2 

p4 

D1 

R1 

N1 

Figure  23  Iteration  I— Example 

Iteration  2:  Transition  t2  is  added  to  net  N]  to  obtain  net  N2,  as  show  in  Figure  24. 

J={jlRj2>0}={l,3), 

•  K={klkk2  <0}={4,5}, 

•  JxK=  {(1,4),(1,5),(3,4),(3,5)}; 

•  Add  rows  in  J  x  K  respectively  (follow  Dj  matrix  union  rules,  and  Rj 
PPR  union  operation  rules),  append  the  results  as  row  6,  7,  8  and  9  to 
the  matrix  [Di,  R|]. 

•  Suppress  rows  in  J,  which  in  this  case  are  row  1  and  row  3. 

•  Row  5  and  row  7  are  identical,  so  row  5  is  eliminated. 

•  Now  we  have  [D2,  R2  ],  D2  contains  the  deadlock  supports  of  net 
N2,  they  are 

{p4},  {pi,  p4},  (pi,  p2},  (p3,  p4},  and  (pi,  p2,  p3}.  Iteration  2 
is  summarized  as; 


Figure  24  Iteration  2  —  Example 

Iteration  3  :  Transition  t3  is  added  to  the  net  N2  to  obtain  net  N3.  See  Figure  25. 
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J={jlRj3>0  }=  {4,  6,}, 
K={klRk3  <0}={8.9}. 

JxK=  {(4,  8),  (4,  9),  (6,  8),  (6,  9)); 


Add  rows  in  J  x  K  respectively  (according  to  Dj  matrix  union  rules, 
and  Ri  PPR  union  rules),  append  the  results  row  10,  row  11,  row 
12  and  row  13  to  the  matrix  [D2,  R2]. 

Suppress  rows  in  J,  which  in  this  case  is  row  4  and  row  6. 

Row  13  and  row  1 1  are  identical,  so  are  row  8  and  row  10,  so  row 
10  and  row  1 1  are  eliminated. 

Now  we  have  [D3,  R3  ] ,  D3  contains  the  deadlock  supports  of  net 
N3  they  are 

{pi,  p2},  {p3,  p4},  and  {pi,  p2,  p3},  {pi,  p3,  p4},  and  {pi,  p2, 
p3,  p4}. 


pi 

P2 

p3 

p4 


D3  R3 


Figure  25  Iteration  3  —  Example 
Results  :  The  final  matrix  of  [D3,  R3]  is  presented  in  Figure  26. 
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Figure  26  Result  —  Example 

The  final  rows  in  D3  are  the  followings  : 

{  1  100}=>{pl,p2};  {00  1  1  }=>{p3,p4} 

{  1  1  1  0  }  =>  {  pi,  p2,  p3}  ;  { 1  0  1  1  }  =>  {  pi,  p3,  p4} 

{1111  }=>{  pl,p2,p3,p4}  ; 

The  minimal  deadlocks  are; 

{pi,  p2}  and  {p3,  p4}. 

The  following  are  traps  and  their  supports: 

{  1  100}=>{pl,p2}  ;  {001  1  }=>{p3,p4} 

{  1  1  0  1  }  =>  {  pi,  p2,  p4}  ;  {  0  1  1  1  }  =>  {  p2,  p3,  p4} 

{1111  }=>{pl,p2,p3,p4}; 

These  place  sets  are  all  the  trap  supports  of  net  N1  of  Figure  21 .  The  minimal  traps  are  {pi, 
p2)  and  {p3,  p4}. 

This  algorithm  is  now  part  of  the  tool  set  needed  to  design  and  analyze  variable  structure 
organization. 


4.  3  SUMMARY 

The  emphasis  during  the  first  year  of  this  project  has  been  on  fundamental  research  -  the 
modeling  of  some  abstract  problems  and  the  development  of  algorithms  for  their  solution.  With 
the  completion  of  Ms.  Rashba’s  Master’s  Project,  Ms.  Jin’s  Master’s  Thesis,  and  with  the 
results  being  obtained  by  Mr.  Zaidi  for  his  PhD  Thesis,  we  are  now  in  a  position  to  begin 
addressing  coordination  problems  in  variable  structure  organizations.  The  implementation  of 
the  results  presented  in  Section  4.2.1  will  complete  that  particular  task  and  will  allow  us  to 
refocus  it  on  human  decision  making. 
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5.0  MEETINGS 

•  Ms.  Jenny  Jin  successfully  defended  her  thesis  in  April  1994. 

•  Dr.  Levis  attended  the  1994  Symposium  on  C2  Research,  Monterey,  CA. 

6.0  CHANGES 

No  changes  in  the  scope  of  work  of  this  project. 
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Graphics  Designer 


Prof.  K.  C.  Chang  does  not  have  any  current  tasking  in  the  project,  but  is  available  to  consult 
on  algorithmic  matters,  if  the  need  arises. 

Ms.  Jin  completed  her  degree  requirements  and  graduated.  She  is  now  pursuing  her  PhD  at 
George  Mason  University  in  Software  Systems  Engineering. 

Ms.  Rashba  completed  her  degree  requirements  and  graduated.  She  is  now  working  as  an 
analyst  at  ANSER  Corp.,  Arlington,  VA. 


Ms.  Cynthia  Johnson  left  the  C3I  Center  to  return  to  industry  after  only  several  weeks  of 
employment.  She  has  not  been  replaced. 
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